cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
neualex
Level 3

Logic condition on IIS Application Pool Identity and Web Site Path Credentials

Jump to solution
On Server Configuration, IIS, Application Pool and Web Site, is it possible to have logic condition not to overwrite Identity and Path Credentials values if they differ from our default values?

Our default values are...

Application Pool, Identity = NetworkService, but some customers change this value to a use a service account.

Web Site, Path Credentials = Application User, but some customers change this value to a use a service account.

Labels (1)
0 Kudos
(1) Solution

Hi @neualex ,

 

Yeah could get the usecase you had added.As i mentioned the values of AppPool,Website,Application will be saved in file "applicationHost.config" which you could find under C:\Windows\System32\inetsrv\config.

 

You can try adding custom action(Probably via Managed custom action) to check if the values aren't default,if so dont modify those.But you have to be careful in sequencing where actual IIS setting changes values,the custom action you would add should handle that as well.

 

Thanks,

Jenifer

View solution in original post

0 Kudos

(3) Replies
Jenifer
Flexera Alumni

Hi @neualex ,

 

There is no way you can do it from Internet Information Services view.

When you say customers change these values?Do they change those by editing configuration file?Else how do they change?

But you can try via custom-actions to validate entries of C:\Windows\System32\inetsrv\config\applicationHost.config.If not default values you can try resetting to desired value.

Managed custom action which is via .Net dll or script based custom action can aid to proceed with this.Again it is based on what is your requirement(Means Why you want it to be with default values)

 

Thanks,

Jenifer

0 Kudos
Jenifer,
 
Little background, our MSI installer creates the App Pool and Web Site entry with default values, see below.
Application Pool, Identity = NetworkService
Web Site, Path Credentials = Application User
 
However, some customers might change these default values from IIS (App Pool/Advanced Settings/Identity and Web Site/Advanced Settings/Physical Path Credentials/Connect As/Specific User) with their own service accounts.
 
Issue is when they  need to reinstall (re-run MSI installer), the installer will overwrite these "service accounts" and replace them with the default values.
 
Logically, we want to avoid this overwriting if possible by querying and comparing these values when running the MSI installer, is this possible?
 
Not sure if these values for the Application Pool/Identity and Web Site/Path Credentials are saved somewhere in the file system.
0 Kudos

Hi @neualex ,

 

Yeah could get the usecase you had added.As i mentioned the values of AppPool,Website,Application will be saved in file "applicationHost.config" which you could find under C:\Windows\System32\inetsrv\config.

 

You can try adding custom action(Probably via Managed custom action) to check if the values aren't default,if so dont modify those.But you have to be careful in sequencing where actual IIS setting changes values,the custom action you would add should handle that as well.

 

Thanks,

Jenifer

0 Kudos